
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/9406C1209FDB11EDB88C5662C4F9AE02.roa
File: 9406C1209FDB11EDB88C5662C4F9AE02.roa (raw, json)
Hash identifier: pkpKzzYuOEBQdYXn1MjC6HjBlTd2nHWd29Mz1RROab0=
Subject key identifier: BE:7B:57:C4:7B:16:60:3B:8F:D9:1A:A5:F4:32:57:F1:A3:43:1E:4B
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0A9A
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/9406C1209FDB11EDB88C5662C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:47:57 +0000
ROA not before: Wed 12 Feb 2025 20:58:32 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 6939
IP address blocks: 103.207.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Feb 12 20:58:32 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a4519d-13ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:15:4d:ce:b4:ba:72:e6:94:4f:95:6a:70:
fd:71:e3:a0:9f:73:63:8d:48:5f:82:12:18:33:5e:
43:e4:23:3c:79:b5:d5:99:cb:0f:68:65:3c:5d:44:
c7:5b:97:17:35:c5:d1:87:0a:b5:be:30:b0:18:d4:
d6:09:d3:44:85:c1:0e:2b:d3:f3:47:1b:ba:58:7c:
ae:03:41:1c:b8:28:d3:09:bf:2b:14:b0:9d:d7:91:
0e:29:50:04:b2:69:e2:3c:86:87:60:a8:19:0d:b8:
9a:08:ab:97:b7:a1:ce:10:f7:fb:a6:c0:c9:27:78:
a3:6a:b4:88:4f:42:9a:dd:66:5f:96:26:11:46:7a:
fa:ac:00:83:f9:77:4b:63:b3:af:ef:73:9c:f5:75:
f2:47:98:a8:9f:5e:27:4c:45:79:1a:fa:2b:02:1a:
70:db:b8:3b:ad:62:0b:01:f3:15:77:58:16:59:af:
ea:d4:c0:c4:7c:c8:77:69:ac:a0:aa:12:24:35:ce:
be:32:3f:47:5a:d6:e8:96:11:0c:18:ff:bd:06:21:
07:1a:a8:fe:eb:bf:72:38:55:ac:9f:28:ca:4d:28:
8c:ec:fa:26:ee:0c:c3:f5:7a:fd:3c:07:b6:88:53:
12:b2:48:b9:28:45:2b:72:37:db:92:99:2c:82:47:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:57:C4:7B:16:60:3B:8F:D9:1A:A5:F4:32:57:F1:A3:43:1E:4B
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/9406C1209FDB11EDB88C5662C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:95:68:83:fc:5a:b8:a3:9b:46:4b:6c:15:82:ab:3d:92:7b:
8d:7a:83:bb:e5:3c:9e:42:cd:74:53:cc:60:41:8e:4b:ca:9a:
11:32:cf:07:80:37:fa:bb:9b:3d:bc:ca:39:49:2c:2a:6a:20:
2c:03:f4:03:15:56:d3:cf:08:3b:e6:e6:3c:06:03:b5:83:a6:
1f:7e:41:5f:f4:58:f3:73:43:7c:95:b7:0e:8a:94:45:7f:89:
45:c1:b2:a5:cc:48:40:4f:ce:16:97:4f:c0:5d:eb:13:59:9d:
08:9c:00:98:ad:6f:ae:83:3a:b3:8a:89:48:6a:52:b0:46:fc:
14:b4:02:d0:cb:cd:b9:7c:4d:b1:50:14:8b:c9:a1:e4:5e:79:
ca:41:66:c4:47:15:36:a4:a5:13:93:d4:49:97:57:95:8f:12:
3d:ad:7e:48:19:f8:ce:63:47:1a:56:8e:36:bc:95:f1:4b:1b:
00:f3:81:05:13:aa:6c:b7:9a:fc:56:07:58:44:bd:d5:42:4a:
ac:be:07:6b:64:bb:d6:8b:b5:45:bd:b9:1c:e5:3d:4b:24:6c:
d5:e6:e2:43:2a:c1:9a:3c:0e:9a:77:8a:5d:be:65:7a:13:39:
f6:4e:ea:0c:c0:27:5a:55:52:3f:db:3a:9a:10:98:7d:31:5c:
77:2b:60:1b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw
MjgwN0EwMjYwHhcNMjUwMjEyMjA1ODMyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTE5ZC0xM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyIVTc60unLmlE+VanD9ceOgn3NjjUhfghIYM15D5CM8ebXVmcsPaGU8XUTH
W5cXNcXRhwq1vjCwGNTWCdNEhcEOK9PzRxu6WHyuA0EcuCjTCb8rFLCd15EOKVAE
smniPIaHYKgZDbiaCKuXt6HOEPf7psDJJ3ijarSIT0Ka3WZfliYRRnr6rACD+XdL
Y7Ov73Oc9XXyR5ion14nTEV5GvorAhpw27g7rWILAfMVd1gWWa/q1MDEfMh3aayg
qhIkNc6+Mj9HWtbolhEMGP+9BiEHGqj+679yOFWsnyjKTSiM7Pom7gzD9Xr9PAe2
iFMSski5KEUrcjfbkpksgkfb1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL57V8R7
FmA7j9kapfQyV/GjQx5LMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz
RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdFNDUvMDZDODU2M0M4M0Q5MTFFQUEzMTI0RjVDQzRGOUFFMDIvOTQwNkMxMjA5
RkRCMTFFREI4OEM1NjYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ89HMA0GCSqGSIb3DQEBCwUAA4IBAQBMlWiD/Fq4o5tGS2wVgqs9
knuNeoO75TyeQs10U8xgQY5LypoRMs8HgDf6u5s9vMo5SSwqaiAsA/QDFVbTzwg7
5uY8BgO1g6YffkFf9Fjzc0N8lbcOipRFf4lFwbKlzEhAT84Wl0/AXesTWZ0InACY
rW+ugzqziolIalKwRvwUtALQy825fE2xUBSLyaHkXnnKQWbERxU2pKUTk9RJl1eV
jxI9rX5IGfjOY0caVo42vJXxSxsA84EFE6pst5r8VgdYRL3VQkqsvgdrZLvWi7VF
vbkc5T1LJGzV5uJDKsGaPA6ad4pdvmV6Ezn2TuoMwCdaVVI/2zqaEJh9MVx3K2Ab
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:43 2026 by rpki-client